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Set Items Description 

51 666143 ENCRYPT??? OR SECUR??? OR RSA OR PRIVATE OR PRIVACY OR CR- 

YPTOG?????? OR PGP OR SCRAMBL??? OR HASH??? OR PRETTY () GOOD () - 
PRIVACY OR DECRYPT??? OR ENCIPHER??? OR DECIPHER??? OR DECOD? - 
?? OR VERIFY??? OR VERIFI?????? OR AUTHENTIC????? OR GATEKEEP- 
? ? ? 

52 266 Sl(lOON) ((FINITE OR GALOIS) () FIELD (3W) (POLYNOMIAL? ? OR AR- 

ITHMETIC? ?) OR RIJNDAEL) 

53 0 S2 (100N) (RADIX ( 3 W) MULTIPLIER? ?) 

54 0 S2 (100N) ( (FLEXIBL? OR DYNAMIC????) (ION) (ANTICIPAT??? OR SE- 

NS??? OR PREPAR?????) (ION) ( MODULUS OR MODULO) (ION) ( VALUE? ? 
OR NUMBER? ? OR RESULT? ? OR QUANTIT??? OR AMOUNT? ?) ) 

55 58 S2(100N) ((PUBLIC OR PUBLISHED) ( ) KEY? ? OR PKI) 

56 25 S5(100N) (ELLIPTIC () CURVE? ? OR ECC OR ECMQV OR ECDH OR ECI- 

ES OR ECDSA) 

57 0 S6 NOT (PD= (19990515 :20020515) OR PD= (20020516 : 20050516) OR 

PD= (2 0050516 : 20060316) ) 

58 0 S5 NOT (PD= (19990515 :20020515) OR PD= (2 0 02 0516 : 2 005 05 16 ) OR 

PD= (20050516 : 20060316) ) 

59 43 S2(100N) (ELLIPTIC () CURVE? ? OR ECC OR ECMQV OR ECDH OR ECI- 

ES OR ECDSA) 

510 1 S9 NOT (PD= (19990515 :20020515) OR PD= (2 002 0516 : 2 00505 16 ) OR 

PD= (2005 0516 : 2 0060316) ) 

511 0 (RADIX (3W) MULTIPLIER? ?)( 100N) ( (FLEXIBL? OR DYNAMIC????) (1- 

0N) (ANTICIPAT??? OR SENS??? OR PREPAR?????) (10N) ( MODULUS OR - 
MODULO) (10N) ( VALUE? ? OR NUMBER? ? OR RESULT? ? OR QUANTIT??? 
OR AMOUNT? ?) ) 

512 0 (RADIX (3W) MULTIPLIER? ?) (100N) ((3 OR THREE) (3N) MULTIPLICAN- 

DS) 

513 21 RADIX ( 3 W) MULTIPLIER? ? AND (SI OR IC= (H04K OR H04L OR G09C 

OR G06F) ) 

514 5 S13 NOT (PD=(19990515:20020515) OR PD= ( 2 002 05 16 : 2 0 05 0516 ) - 

OR PD= (20050516:20060316) ) 

515 4 AU=((DROR I? OR DROR, I?) AND (GRESSEL C? OR GRESSEL, C?) - 

AND (MOSTOVOY M? OR MOSTOVOY, M?) AND (MOLCHANOV A? OR MOLCHA- 
NOV, A?)) 
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EC EE ES FI GB GD *GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR 
LS LT LU LV MA MD MG MK MN MW MX MZ NO NZ PL PT RO RU SD SE SG SI SK SL 
TJ TM TR TT TZ UA UG US UZ VN YU ZA ZW 

(EP) AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE TR 

(OA) BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG 

(AP) GH GM KE LS MW MZ SD SL SZ TZ UG ZW 
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Detailed Description 
Claims 

Fulltext Word Count: 19125 
English Abstract 

An extension of serial (60 ) /parallel (50) Montgomery multiplication 
method (Figs. 1-2) with simultaneous reduction as previously implemented 
by the applicants, adapted innovatively to perform both in the prime 
number and in the GF(2"sup"q) polynomial based number field, in such a 
way as to simplify the flow of operands, by performing a multiple • 
anticipatory function (430) to enhance the previous modular 
multiplication procedure. 

French Abstract 

L' invention concerne une extension de la methode de multiplication 
modulaire serie-parallele de Montgomery avec reduction simultanee, telle 
que mise en oeuvre anterieurement par les deposants, adaptee de facon 
novatrice pour se realiser tant dans le nombre premier que dans le 
domaine du nombre base sur le polynome GF(2"sup"q), ce qui permet de 
simplifier le flux d'operandes grace a une fonction anticipatoire 
multiple pouvant ameliorer les operations de multiplication modulaire 
anterieures . 
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Fulltext Availability: 
Detailed Description 

Detailed Description 
ARITHMETIC PROCESSOR 

The present invention relates to a method and apparatus for performing 
finite field and integer arithmetic . 

BACKGROUND OF THE INVENTION 

Elliptic Curve (EC) cryptography over a finite field require 
arithmetic 

' operations of addition, multiplication, squaring and inversion. 
Additionally, subtraction operations are also required if the. . . 



.computing signatures, however these operations are required less 



frequently than the finite field operations. 



EC cryptography as an example, requires the full complement of modular 
and finite field operations, addition, subtraction, multiplication and 
inversion. 

Field sizes for cryptography tend to be relatively large, requiring 
fast, 1 5 dedicated processors to perform the arithmetic... 

? 

Set Items Description 

51 10602105 ENCRYPT??? OR SECUR??? OR RSA OR PRIVATE OR PRIVACY OR CR- 

YPTOG?????? OR PGP OR SCRAMBL??? OR HASH??? OR PRETTY () GOOD () - 
PRIVACY OR DECRYPT??? OR ENCIPHER??? OR DECIPHER??? OR DECOD?- 
?? OR VERIFY??? OR VERIFI?????? OR AUTHENTIC????? OR GATEKEEP- 
? ? ? 

52 670 Sl(lOON) ((FINITE OR GALOIS) () FIELD (3W) (POLYNOMIAL? ? OR AR- 

ITHMETIC? ?) OR RIvJNDAEL) 

53 0 S2 (100N) (RADIX (3W) MULTIPLIER? ?) 

54 0 S2(100N) ( (FLEXIBL? OR DYNAMIC????) (ION) (ANTICIPAT??? OR SE- 

NS??? OR PREPAR?????) (ION) ( MODULUS OR MODULO) (ION) ( VALUE? ? 
OR NUMBER? ? OR RESULT? ? OR QUANTIT??? OR- AMOUNT? ?)) 

55 142 S2(100N) ((PUBLIC OR PUBLISHED) ( ) KEY? ? OR PKI) 

56 19 S5(100N) (ELLIPTIC () CURVE? ? OR ECC OR ECMQV OR ECDH OR ECI- 

ES OR ECDSA) 

57 5 S6 AND (PY<2000 OR PD<19990515) 

58 7 (S5 AND (PY<2000 OR PD<19990515) ) NOT S6 

59 10 RADIX (3W) MULTIPLIER? ? 

510 0 S9 AND (((FLEXIBL? OR DYNAMIC????) (10N) (ANTICIPAT??? OR SE- 

NS??? OR PREPAR?????) (10N) ( MODULUS OR MODULO) (10N) ( VALUE? ? 
OR NUMBER? ? OR RESULT? ? OR QUANTIT??? OR AMOUNT? ?)) OR ((3 
OR THREE OR THIRD) (3N) MULTIPLICAND? ?) OR MONTGOMERY) 

511 57 AU=((DROR I? OR DROR, I?) OR (GRESSEL C? OR GRESSEL, C?) OR 

(MOSTOVOY M? OR MOSTOVOY, M?) OR (MOLCHANOV A? OR MOLCHANOV, 
A?)) AND (PY<2000 OR PD<19990515) 

512 0 Sll AND ((FINITE OR GALOIS) ()FIELD(3W) (POLYNOMIAL? ? OR AR- 

ITHMETIC? ?) OR RIJNDAEL) 

? show files 

File 275: Gale Group Computer DB (TM) 1983 -2006/Mar 15 

(c) 2 006 The Gale Group 
File 47: Gale Group Magazine DB (TM) 1959-2006/Mar 15 

(c) 2 0 06 The Gale group 
File 16:Gale Group PROMT (R) 1990 -2006/Mar 16 

(c) 2006 The Gale Group 
File 624 : McGraw-Hill Publications 1985-2006/Mar 16 

(c) 2006 McGraw-Hill Co. Inc 
File 484 : Periodical Abs Plustext 1986-2006/Mar W2 

(c) 2006 ProQuest 
File 613: PR Newswire 1999-2006/Mar 16 

(c) 2006 PR Newswire Association Inc 
File 813: PR Newswire 1987 -1999/Apr 30 

(c) 1999 PR Newswire Association Inc 
File 239:Mathsci 1940 -2006/Apr 

(c) 2 006. American Mathematical Society 
File 370:Science 1996-1999/ Jul W3 

(c) 1999 AAAS 

File 696:DIALOG Telecom. Newsletters 1995 -2006/Mar 16 



(c) 2006 Dialog 
File 621:Gale Group New Prod.Annou: (R) 1985 -2006/Mar 15 

(c) 2006 The Gale Group 
File 674:Computer News Fulltext 1989-2006/Mar W2 

(c) 2006 IDG Communications 
File 88:Gale Group Business A.R.T.S. 1976-2006/Mar 09 

(c) 2006 The Gale Group 
File 369:New Scientist 1994 -2006/Aug W4 

(c) 2006 Reed Business Information Ltd. 
File 160:Gale Group PROMT (R) 1972-1989 

(c) 1999 The Gale Group 
File 635:Business Dateline ,(R) 1985 -2006/Mar 16 

(c) 2006 ProQuest Inf o&Learning 
File 15 :ABl/lnform(R) 1971-2006/Mar 16 

(c) 2006 ProQuest Inf o&Learning 
File 9:Business & Industry (R) Jul/1994 -2006/Mar 15 

(c) 2006 The Gale Group 
File 13:BAMP 2006/Mar Wl 

(c) 2006 The Gale Group 
File 810:Business Wire 1986 - 1999/Feb 28 

(c) 1999 Business Wire 
File 610:Business Wire 1999-2 006/Mar 16 

(c) 2006 Business Wire. 
File 647:CMP Computer Fulltext 1988 -2006/Apr Wl 

(c) 2006 CMP Media, LLC 
File 98:General Sci Abs 1984 -2004/Dec 

(c) 2005 The HW Wilson Co. 
File 148:Gale Group Trade & Industry DB 1976-2 006/Mar 15 

(c)2006 The Gale Group 
File 634: San Jose Mercury Jun 1985-2006/Mar 15 

(c) 2006 San Jose Mercury News 
File 256 :TecInfoSource 82-2006/Feb 

(c) 2006 Info. Sources Inc 



Set Items Description 

51 2614 979 ENCRYPT??? OR SECUR??? OR RSA OR PRIVATE OR PRIVACY OR CR- 

YPTOG? ? ??? ? OR PGP OR SCRAMBL??? OR HASH??? OR PRETTY () GOOD () - 
PRIVACY OR DECRYPT??? OR ENCIPHER??? OR DECIPHER??? OR DECOD? - 
?? OR VERIFY??? OR VERIFI?????? OR AUTHENTIC????? OR GATEKEEP- 
? ? ? 

52 908 SI AND ((FINITE OR GALOIS) ()FIELD(3W) (POLYNOMIAL? ? OR ARI- 

THMETIC? ?) OR RIJNDAEL) 

53 1 S2 AND RADIX ( 3 W) MULTIPLIER? ? 

54 0 S2 AND ( (FLEXIBL? OR DYNAMIC????) (10N) (ANTICIPAT? ? ? OR SEN- 

S??? OR PREPAR?????) (10N) ( MODULUS OR MODULO) (10N) ( VALUE? ? - 
OR NUMBER? ? OR RESULT? ? OR QUANTIT??? OR AMOUNT? ?)) 

55 101 S2 AND ((PUBLIC OR PUBLISHED) ( ) KEY? ? OR PKI) 

56 36 S5 AND (ELLIPTIC () CURVE? ? OR ECC OR ECMQV OR ECDH OR ECIES 

OR ECDSA) 

57 7 S6 AND (PY<2000 OR PD<19990515) 

58 14 (S5 AND (PY<2000 OR PD<19990515) ) NOT S6 

59 180 RADIX (3W) MULTIPLIER? ? 

S10 35 S9 AND (((FLEXIBL? OR DYNAMIC????) (10N) (ANTICIPAT??? OR SE- 

NS??? OR PREPAR?????) (10N) ( MODULUS OR MODULO) (10N) ( VALUE? ? 
OR NUMBER? ? OR RESULT? ?. OR QUANTIT??? OR AMOUNT? ?)) OR ((3 
OR THREE OR THIRD) (3N) MULTIPLICAND? ?) OR MONTGOMERY) 



Sll 11 S10 AND (PY<2000 OR PD<19990515) 
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Abstract: Describes a single chip Public Key Distribution System 
(PKDS) based on Hellman's discrete exponential algorithm and Galois 

field arithmetic . A single VLSI high-speed PKDS has been designed and 

implemented for the network environment. This, system is configured to 
operate in a number system which resembles an extended Galois field, 
GF{2/sup m/) . Linear feedback shift . register is used to implement the 
arithmetic operations such as add, multiply, and module operations. Since 
there are . no carry and borrow required for Galois field arithmetic , 
high-speed public key distribution/exchange becomes feasible. The 

hardware was implemented by CMOS logic and fits in a 5"*7" single card. 
Since the system architecture is simple and modular, it is quite suitable 
for VLSI implementation. The VLSI PKDS chip has been fabricated using a 3 
micron NMOS process and is designed to support a 4 MHz clock rate. This 
chip is believed to bridge the gap between the classical theory of 

cryptography and the practical encryption applications. (16 Refs) 
Subfile: B C 

Descriptors: cryptography ; data communication systems; large scale 
integration 

Identifiers: Hellman discrete exponential algorithm; linear feedback 
shift register; single-chip VLSI; public key distribution system; 
Galois field arithmetic ; number system; extended Galois field; 
arithmetic operations; add; multiply; module operations; CMOS logic; 3 
micron NMOS process; 4 MHz clock rate; cryptography ; encryption 
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PUBLICATION DATE: 1989 

DOCUMENT TYPE: Journal Article 
RECORD TYPE: Abstract 
LANGUAGE: English 

FILE SEGMENT: Computer & Information Systems Abstracts 
ABSTRACT : 

The authors will examine ways of implementing public key algorithms 
based on modular integer arithmetic ( RSA ) and finite field 
arithmetic (Dif f ie^Hellman, ElGamal) . In particular, they will be 
concerned with architectures for VLSI implementations. 

DESCRIPTORS: Cryptography ; Encryption ; Arithmetic; Very large scale 

integration 
IDENTIFIERS: security ; algorithms 
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Country of Publication: USA 
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Two exponentiation circuits over GF(2 SUP n ) are proposed. Using the 
fact that squaring is a linear operation over GF(2 SUP n ), a time-space 
tradeoff in smartcard-based circuitry is presented. It is further shown how 
multiplication is performed by a single shift, based on replacing the 
public key alpha SUP alpha element of GF (2 SUP n ) by its minimal 

polynomial. Other considerations, related to structure regularity and the 
possible use of dynamic shift registers, are also treated 

English Descriptors: Cryptography ; VLSI circuit; Integrated circuit; 
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This contribution introduces a class of Galois field used to achieve fast 



finite field arithmetic which we call an Optimal Extension Field 

(OEF) . This approach is well suited for implementation of public - key 
cryptosystems based on elliptic and hyperelliptic curves. Whereas previous 
reported optimizations focus on finite fields of the form GF(p) and GF(2 
SUP m ) , an * OEF is the class of fields GF (p SUP m ) , for p a prime of 
special form and m a positive integer. Modern RISC workstation processors 
are optimized to perform integer arithmetic on integers of size up to the 
word size of the processor. Our construction employs well-known techniques 
for fast finite field arithmetic which fully exploit the fast integer 
arithmetic found on these processors. In this paper, we describe our 
methods to perform the arithmetic in an OEF and the methods to construct 
OEFs . We provide a list of OEFs tailored for processors with 8, 16, 32, and 
64 bit word sizes. We report on our application of this approach to 
construction of elliptic curve cryptosystems and demonstrate a 

substantial performance improvement over all previous reported software 
implementations of Galois field arithmetic for elliptic curves . 

English Descriptors: Cryptography ; Public key 

French Descriptors: Cryptographie ; Cle publique 
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Abstract: An elliptic curves cryptosystem is a high performance 

public key cryptosystem. This cryptosystem offers higher security 

level, smaller key size, lower bandwith and higher efficiency compared with 
other public key cryptosystems. An implementation of the elliptic 

curves cryptosystem needs a high performance finite field arithmetic 
module. In this paper we discuss a VLSI architecture of a finite field 



F(2/sup 2n/) multiplier using normal basis representations. Using the 
proposed architecture, we obtain a faster computational time and the lower 
complexity architecture compares with other architectures. (8 Refs) 
Subfile: B C 
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A hybrid radix-4/radix- 8 architecture targeted for high bit multipliers 
is presented as a compromise between the high speed of a radix -4 
multiplier architecture and the low power dissipation of a radix -8 
multiplier architecture. In this hybrid radix -4/ radix -8 multiplier 
architecture, the performance bottleneck of a radix -8 multiplier , the 
generation of three times the multiplicand for use in generating the 
radix-8 partial product, is performed in parallel with the reduction of the 
radix-4 partial products rather than serially, as in a radix -8 
multiplier . This hybrid radix -4/ radix -8 multiplier architecture 
requires 13% less power for a 64 x 64 bit multiplier, and results in only a 
9% increase in delay, as compared with a radix-4 implementation. When 
supply voltage is scaled such that all multipliers exhibit" the same delay, 
the 64 x 64 bit hybrid' "radix -4/ radix -8 multiplier dissipates less 
power than either the radix-4 or radix -8 multipliers . The hybrid 
radix-4/radix- 8 architecture is therefore appropriate for those 



applications that must dissipate minimal power and operate at high speeds. 
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ALU has a processing bit width greater than the operand buses data bit 
width. The controller is programmed with instructions to control a 
selected arithmetic operation of the arithmetic logic unit. The operand 
buses has a bit width the same as a processing bit width of the ALU and 
the result data bus bit width. 
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